Overview

overview

10

Static

static

3

3e61ec0bf4...18.exe

windows7-x64

10

3e61ec0bf4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e61ec0bf48ec172a96a9dc363c9c62d_JaffaCakes118

  • Size

    838KB

  • Sample

    240729-k76d4a1cqp

  • MD5

    3e61ec0bf48ec172a96a9dc363c9c62d

  • SHA1

    cb0899b0285159eb60fca2ae98b6a113d16cfe9f

  • SHA256

    82c895b21145339bbd6a23efe26f5c44f4ee6facbc6f87dca33a8fe7fe1aa7af

  • SHA512

    980ac69251262dfbd104d7d29bfd4978ebb8040674f6d66c0ceb596c03512b98e7c5da8ebad120a8cfef60d108b8e8031f8889c6249e57c22fb54dda0c75412c

  • SSDEEP

    12288:h58WhWmNEYOyX6pyq3NcKe10LlQDghSGA16MOVC82q5MXdSBFU5A+Dh9U0j:h5dxNx6LtZLOObubz/aMd

Score
10/10
massloggerdefense_evasiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      3e61ec0bf48ec172a96a9dc363c9c62d_JaffaCakes118

    • Size

      838KB

    • MD5

      3e61ec0bf48ec172a96a9dc363c9c62d

    • SHA1

      cb0899b0285159eb60fca2ae98b6a113d16cfe9f

    • SHA256

      82c895b21145339bbd6a23efe26f5c44f4ee6facbc6f87dca33a8fe7fe1aa7af

    • SHA512

      980ac69251262dfbd104d7d29bfd4978ebb8040674f6d66c0ceb596c03512b98e7c5da8ebad120a8cfef60d108b8e8031f8889c6249e57c22fb54dda0c75412c

    • SSDEEP

      12288:h58WhWmNEYOyX6pyq3NcKe10LlQDghSGA16MOVC82q5MXdSBFU5A+Dh9U0j:h5dxNx6LtZLOObubz/aMd

    Score
    10/10
    massloggerdefense_evasiondiscoveryspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks